Vulnerability · Published Aug 25, 2025 · Assigned by GitHub_M
CVE-2025-55301The Scratch Channel Allows Username Modification
Medium 6.7
In plain English
A medium-severity improper input validation in the-scratch-channel.github.io from The-Scratch-Channel. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Severity (CVSS 3.1)6.7Medium
Exploit odds (30 days)0.2%top 92.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Scratch Channel is a news website. In version 1, it is possible to go to application in devtools and click local storage to edit the account's username locally. This issue has been patched in version 1.1.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| The-Scratch-Channel | the-scratch-channel.github.io | = 1 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H